7329 matches found
Apache Tomcat multiple security vulnerabilities
Files deletion, weak permissions after re-installation...
[SECURITY] CVE-2009-2901 Apache Tomcat insecure partial deploy after failed undeploy
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-2901: Apache Tomcat insecure partial deploy after failed undeploy Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.0 to 5.5.28 Tomcat 6.0.0 to 6.0.20 The unsupported Tomcat 3.x, 4.x and 5.0.x versions may be...
[SECURITY] CVE-2009-2902 Apache Tomcat unexpected file deletion in work directory
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-3548: Apache Tomcat unexpected file deletion and/or alteration Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.0 to 5.5.28 Tomcat 6.0.0 to 6.0.20 The unsupported Tomcat 3.x, 4.x and 5.0.x versions may be als...
Fixed in Apache Tomcat 6.0.24
Note: These issues were fixed in Apache Tomcat 6.0.21 but the release votes for the 6.0.21, 6.0.22 and 6.0.23 release candidates did not pass. Therefore, although users must download 6.0.24 to obtain a version that includes fixes for these issues, versions 6.0.21 onwards are not included in the...
PT-2010-1277 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.0 through 5.5.28 Apache Tomcat versions 6.0.0 through 6.0.20 Description: The issue allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename. When deploying WAR file...
Surge FTP Admin Web Module Directory Traversal
======================================================================================== | Title : SURGE FTP ADMIN WEB Module Version 2.0 Apache Tomcat v.5.5.26 Directory Traversal Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi -...
RHEL 4 : Satellite Server (RHSA-2008:0630)
Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...
RHEL 4 : mod_jk in Satellite Server (RHSA-2009:1618)
An updated modjk package that fixes one security issue is now available for Red Hat Network Satellite Server 5.1 and 5.2. This update has been rated as having low security impact by the Red Hat Security Response Team. modjk is an Apache Tomcat connector that allows Apache Tomcat and the Apache HT...
Apache Tomcat Directory Traversal
The remote web server proxies certain requests to an Apache Tomcat server and allows directory traversal attacks due to Tomcat allowing '/', '', and '%5c' characters as directory separators. By sending a specially crafted request, it is possible for an attacker to break out of the given context...
Apache Tomcat表单权限信息泄露漏洞
No description provided by source...
Apache Tomcat HttpServletResponse.sendError()跨站脚本攻击漏洞
No description provided by source...
apache-tomcat 6.0.13 信息泄漏漏洞
No description provided by source...
Apache Tomcat WebDav 远程信息泄露漏洞
No description provided by source...
Apache Tomcat RequestDispatcher信息泄露漏洞
No description provided by source...
Apache Tomcat Error Message Reporting 跨站脚本攻击漏洞
No description provided by source...
Apache Tomcat Java AJP Connector Invalid Header拒绝服务攻击漏洞
No description provided by source...
Apache Tomcat RemoteFilterValve权限绕过漏洞
No description provided by source...
Apache Tomcat MS-DOS设备名称信息泄露漏洞
No description provided by source...